Last Modified: Sep 14, 2026
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
21.1.0, 21.1.0.1, 21.1.0.2
Opened: Aug 20, 2026 Severity: 4-Minor Related Article:
K000163249
When updating an ACME account from the BIG-IP Configuration utility, the ACME provider may remain in an Updating or Pending state.
After an ACME account update, the account-action value may remain set to update even though the account status is valid. This leaves the provider in an Updating or Pending state and may prevent additional account changes, certificate operations, or provider deletion.
BIG-IP 21.1.0 ACME provider Let’s Encrypt or another ACME-compatible certificate authority ACME account update initiated from the GUI
1. Log in to the BIG-IP command-line interface. 2. Display the ACME provider configuration: tmsh list sys crypto acme-provider <provider_name> 3. Confirm that the output contains both of the following values: account-action update account-status valid 4. Clear the pending account action: tmsh modify sys crypto acme-provider <provider_name> account-action none 5. Save the configuration: tmsh save sys config 6. Verify the provider configuration again: tmsh list sys crypto acme-provider <provider_name> The account-action update line should no longer be present. 7. Confirm that the provider is no longer displayed as Updating or Pending in the GUI, then test certificate renewal.
None